casdoor-ruby-sdk 1.0.0 → 1.1.1

data/lib/casdoor/role.rb

@@ -0,0 +1,52 @@
+# frozen_string_literal: true
+
+# Copyright 2026 The Casdoor Authors. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Casdoor
+  class Role < Entity; end
+
+  # The role APIs, the counterpart of role.go of the Go SDK
+  class Client
+    def get_roles
+      get_objects('get-roles', Role, 'owner' => organization_name)
+    end
+
+    # Returns the objects of the page and the total count. query_map can filter and sort them, e.g.
+    # { field: "name", value: "alice", sort_field: "created_time", sort_order: "descend" }
+    def get_pagination_roles(page, page_size, query_map = {})
+      get_pagination_objects('get-roles', Role, organization_name, page, page_size, query_map)
+    end
+
+    def get_role(name)
+      get_object('get-role', Role, 'id' => get_id(name))
+    end
+
+    def update_role(role)
+      modify_object('update-role', Role, role, organization_name)
+    end
+
+    def update_role_for_columns(role, columns)
+      modify_object('update-role', Role, role, organization_name, columns)
+    end
+
+    def add_role(role)
+      modify_object('add-role', Role, role, organization_name)
+    end
+
+    def delete_role(role)
+      modify_object('delete-role', Role, role, organization_name)
+    end
+  end
+end

data/lib/casdoor/session.rb

@@ -0,0 +1,53 @@
+# frozen_string_literal: true
+
+# Copyright 2026 The Casdoor Authors. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Casdoor
+  class Session < Entity; end
+
+  # The session APIs, the counterpart of session.go of the Go SDK
+  class Client
+    def get_sessions
+      get_objects('get-sessions', Session, 'owner' => organization_name)
+    end
+
+    # Returns the objects of the page and the total count. query_map can filter and sort them, e.g.
+    # { field: "name", value: "alice", sort_field: "created_time", sort_order: "descend" }
+    def get_pagination_sessions(page, page_size, query_map = {})
+      get_pagination_objects('get-sessions', Session, organization_name, page, page_size, query_map)
+    end
+
+    # A session is identified by its user and application
+    def get_session(name, application)
+      get_object('get-session', Session, 'sessionPkId' => "#{get_id(name)}/#{application}")
+    end
+
+    def update_session(session)
+      modify_object('update-session', Session, session, organization_name)
+    end
+
+    def update_session_for_columns(session, columns)
+      modify_object('update-session', Session, session, organization_name, columns)
+    end
+
+    def add_session(session)
+      modify_object('add-session', Session, session, organization_name)
+    end
+
+    def delete_session(session)
+      modify_object('delete-session', Session, session, organization_name)
+    end
+  end
+end

data/lib/casdoor/sms.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+
+# Copyright 2026 The Casdoor Authors. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Casdoor
+  # Sending SMS with the SMS provider of the application, the counterpart of sms.go of the Go SDK
+  class Client
+    def send_sms(content, *receivers)
+      do_post('send-sms', nil, { 'content' => content, 'receivers' => receivers.flatten })
+      true
+    end
+
+    # Sends with the given SMS provider instead of the application's one
+    def send_sms_by_provider(content, provider, *receivers)
+      do_post('send-sms', { 'provider' => provider }, { 'content' => content, 'receivers' => receivers.flatten })
+      true
+    end
+  end
+end

data/lib/casdoor/subscription.rb

@@ -0,0 +1,48 @@
+# frozen_string_literal: true
+
+# Copyright 2026 The Casdoor Authors. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Casdoor
+  class Subscription < Entity; end
+
+  # The subscription APIs, the counterpart of subscription.go of the Go SDK
+  class Client
+    def get_subscriptions
+      get_objects('get-subscriptions', Subscription, 'owner' => organization_name)
+    end
+
+    # Returns the objects of the page and the total count. query_map can filter and sort them, e.g.
+    # { field: "name", value: "alice", sort_field: "created_time", sort_order: "descend" }
+    def get_pagination_subscriptions(page, page_size, query_map = {})
+      get_pagination_objects('get-subscriptions', Subscription, organization_name, page, page_size, query_map)
+    end
+
+    def get_subscription(name)
+      get_object('get-subscription', Subscription, 'id' => get_id(name))
+    end
+
+    def update_subscription(subscription)
+      modify_object('update-subscription', Subscription, subscription, organization_name)
+    end
+
+    def add_subscription(subscription)
+      modify_object('add-subscription', Subscription, subscription, organization_name)
+    end
+
+    def delete_subscription(subscription)
+      modify_object('delete-subscription', Subscription, subscription, organization_name)
+    end
+  end
+end

data/lib/casdoor/syncer.rb

@@ -0,0 +1,48 @@
+# frozen_string_literal: true
+
+# Copyright 2026 The Casdoor Authors. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Casdoor
+  class Syncer < Entity; end
+
+  # The syncer APIs, the counterpart of syncer.go of the Go SDK
+  class Client
+    def get_syncers
+      get_objects('get-syncers', Syncer, 'owner' => organization_name)
+    end
+
+    # Returns the objects of the page and the total count. query_map can filter and sort them, e.g.
+    # { field: "name", value: "alice", sort_field: "created_time", sort_order: "descend" }
+    def get_pagination_syncers(page, page_size, query_map = {})
+      get_pagination_objects('get-syncers', Syncer, organization_name, page, page_size, query_map)
+    end
+
+    def get_syncer(name)
+      get_object('get-syncer', Syncer, 'id' => get_id(name))
+    end
+
+    def update_syncer(syncer)
+      modify_object('update-syncer', Syncer, syncer, organization_name)
+    end
+
+    def add_syncer(syncer)
+      modify_object('add-syncer', Syncer, syncer, organization_name)
+    end
+
+    def delete_syncer(syncer)
+      modify_object('delete-syncer', Syncer, syncer, organization_name)
+    end
+  end
+end

data/lib/casdoor/token.rb

@@ -0,0 +1,60 @@
+# frozen_string_literal: true
+
+# Copyright 2026 The Casdoor Authors. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Casdoor
+  class Token < Entity; end
+
+  # The token APIs, the counterpart of token.go of the Go SDK
+  class Client
+    def get_tokens
+      get_objects('get-tokens', Token, 'owner' => 'admin')
+    end
+
+    # Returns the objects of the page and the total count. query_map can filter and sort them, e.g.
+    # { field: "name", value: "alice", sort_field: "created_time", sort_order: "descend" }
+    def get_pagination_tokens(page, page_size, query_map = {})
+      get_pagination_objects('get-tokens', Token, 'admin', page, page_size, query_map)
+    end
+
+    def get_token(name)
+      get_object('get-token', Token, 'id' => get_admin_id(name))
+    end
+
+    def update_token(token)
+      modify_object('update-token', Token, token, 'admin')
+    end
+
+    def update_token_for_columns(token, columns)
+      modify_object('update-token', Token, token, 'admin', columns)
+    end
+
+    def add_token(token)
+      modify_object('add-token', Token, token, 'admin')
+    end
+
+    def delete_token(token)
+      modify_object('delete-token', Token, token, 'admin')
+    end
+
+    # Asks Casdoor whether the token is active, see RFC 7662. Returns a hash like
+    # {"active" => true, "client_id" => "...", "username" => "alice", "exp" => 1700000000, ...}.
+    def introspect_token(token, token_type_hint = 'access_token')
+      request = Net::HTTP::Post.new(URI(get_url('login/oauth/introspect')))
+      request.set_form_data('token' => token, 'token_type_hint' => token_type_hint)
+      check_oauth_response(send_request(request))
+    end
+  end
+end

data/lib/casdoor/transaction.rb

@@ -0,0 +1,62 @@
+# frozen_string_literal: true
+
+# Copyright 2026 The Casdoor Authors. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Casdoor
+  class Transaction < Entity; end
+
+  # The transaction APIs, the counterpart of transaction.go of the Go SDK
+  class Client
+    def get_transactions
+      get_objects('get-transactions', Transaction, 'owner' => organization_name)
+    end
+
+    # Returns the objects of the page and the total count. query_map can filter and sort them, e.g.
+    # { field: "name", value: "alice", sort_field: "created_time", sort_order: "descend" }
+    def get_pagination_transactions(page, page_size, query_map = {})
+      get_pagination_objects('get-transactions', Transaction, organization_name, page, page_size, query_map)
+    end
+
+    def get_transaction(name)
+      get_object('get-transaction', Transaction, 'id' => get_id(name))
+    end
+
+    def get_user_transactions(user_name)
+      get_objects('get-user-transactions', Transaction, 'owner' => organization_name, 'user' => user_name)
+    end
+
+    def update_transaction(transaction)
+      modify_object('update-transaction', Transaction, transaction, organization_name)
+    end
+
+    # Returns [true, the ID (name) of the new transaction]
+    def add_transaction(transaction)
+      add_transaction_with_dry_run(transaction, false)
+    end
+
+    # With dry_run, Casdoor only validates the transaction without saving it
+    def add_transaction_with_dry_run(transaction, dry_run)
+      transaction = to_entity(Transaction, transaction)
+      transaction.owner = organization_name if transaction.owner.to_s.empty?
+      query = { 'id' => transaction.get_id }
+      query['dryRun'] = '1' if dry_run
+      [true, do_post('add-transaction', query, transaction)['data'].to_s]
+    end
+
+    def delete_transaction(transaction)
+      modify_object('delete-transaction', Transaction, transaction, organization_name)
+    end
+  end
+end

data/lib/casdoor/url.rb

@@ -0,0 +1,47 @@
+# frozen_string_literal: true
+
+# Copyright 2026 The Casdoor Authors. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Casdoor
+  # The URLs of the Casdoor pages, the counterpart of url.go of the Go SDK
+  class Client
+    # The sign-up page. With enable_password, it's the plain sign-up page of the application and redirect_uri can be
+    # empty; otherwise the user is signed in after signing up and redirected back to redirect_uri like
+    # get_signin_url.
+    def get_signup_url(enable_password, redirect_uri)
+      return "#{endpoint}/signup/#{application_name}" if enable_password
+
+      get_signin_url(redirect_uri).sub('/login/oauth/authorize', '/signup/oauth/authorize')
+    end
+
+    # The sign-in page that the browser is redirected to. After signing in, Casdoor redirects back to redirect_uri
+    # with "code" and "state" in the query, and the code is exchanged with get_oauth_token.
+    def get_signin_url(redirect_uri, state: application_name, scope: 'read')
+      query = { 'client_id' => client_id, 'response_type' => 'code', 'redirect_uri' => redirect_uri,
+                'scope' => scope, 'state' => state }
+      "#{endpoint}/login/oauth/authorize?#{URI.encode_www_form(query)}"
+    end
+
+    def get_user_profile_url(user_name, access_token = '')
+      url = "#{endpoint}/users/#{organization_name}/#{user_name}"
+      access_token.to_s.empty? ? url : "#{url}?#{URI.encode_www_form('access_token' => access_token)}"
+    end
+
+    def get_my_profile_url(access_token = '')
+      url = "#{endpoint}/account"
+      access_token.to_s.empty? ? url : "#{url}?#{URI.encode_www_form('access_token' => access_token)}"
+    end
+  end
+end

data/lib/casdoor/user.rb

@@ -0,0 +1,124 @@
+# frozen_string_literal: true
+
+# Copyright 2026 The Casdoor Authors. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Casdoor
+  class User < Entity; end
+
+  # The user APIs, the counterpart of user.go of the Go SDK
+  class Client
+    # The users of all the organizations, only allowed for global admins
+    def get_global_users
+      get_objects('get-global-users', User, nil)
+    end
+
+    def get_users
+      get_objects('get-users', User, 'owner' => organization_name)
+    end
+
+    # sorter is the DB column to sort by, e.g. "created_time"
+    def get_sorted_users(sorter, limit)
+      get_objects('get-sorted-users', User, 'owner' => organization_name, 'sorter' => sorter, 'limit' => limit.to_s)
+    end
+
+    # Returns the users of the page and the total count. query_map can filter and sort them, e.g.
+    # { field: "name", value: "alice", sort_field: "created_time", sort_order: "descend" }
+    def get_pagination_users(page, page_size, query_map = {})
+      get_pagination_objects('get-users', User, organization_name, page, page_size, query_map)
+    end
+
+    # is_online is "" to count all the users, "1" or true for the online ones, "0" or false for the offline ones
+    def get_user_count(is_online = '')
+      is_online = { true => '1', false => '0', nil => '' }.fetch(is_online, is_online)
+      do_get_bytes(get_url('get-user-count', 'owner' => organization_name, 'isOnline' => is_online)).to_i
+    end
+
+    def get_user(name)
+      get_object('get-user', User, 'id' => get_id(name))
+    end
+
+    # The user that the client is authenticated as. It's meant to be used with a client returned by
+    # with_access_token, so that the user of an access token can be retrieved:
+    #
+    #   user = client.with_access_token(token["access_token"]).get_account
+    def get_account
+      get_object('get-account', User, nil)
+    end
+
+    def get_user_by_email(email)
+      get_object('get-user', User, 'owner' => organization_name, 'email' => email)
+    end
+
+    def get_user_by_phone(phone)
+      get_object('get-user', User, 'owner' => organization_name, 'phone' => phone)
+    end
+
+    # user_id is the "id" field of the user (a UUID), not "owner/name"
+    def get_user_by_user_id(user_id)
+      get_object('get-user', User, 'owner' => organization_name, 'userId' => user_id)
+    end
+
+    # old_password isn't required when an admin sets the password of another user, pass an empty string then
+    def set_password(owner, name, old_password, new_password)
+      form = { 'userOwner' => owner, 'userName' => name, 'oldPassword' => old_password, 'newPassword' => new_password }
+      do_post('set-password', nil, form, true)['status'] == 'ok'
+    end
+
+    # Updates the user of the ID ("owner/name"), e.g. to rename the user
+    def update_user_by_id(id, user)
+      modify_user_by_id('update-user', id, user)
+    end
+
+    # Updates the user of the user ID (the "id" field of the user)
+    def update_user_by_user_id(owner, user_id, user)
+      user = to_entity(User, user)
+      do_post('update-user', { 'owner' => owner, 'userId' => user_id }, user)['data'] == 'Affected'
+    end
+
+    def update_user(user)
+      modify_object('update-user', User, user, organization_name)
+    end
+
+    def update_user_for_columns(user, columns)
+      modify_object('update-user', User, user, organization_name, columns)
+    end
+
+    def add_user(user)
+      modify_object('add-user', User, user, organization_name)
+    end
+
+    def delete_user(user)
+      modify_object('delete-user', User, user, organization_name)
+    end
+
+    # Checks the password of a user, e.g. User.new(owner: "casbin", name: "alice", password: "123").
+    # Returns false when the password is wrong.
+    def check_user_password(user)
+      user = to_entity(User, user)
+      user.owner = organization_name if user.owner.to_s.empty?
+      do_post('check-user-password', { 'id' => user.get_id }, user)['status'] == 'ok'
+    rescue ApiError
+      false
+    end
+
+    private
+
+    def modify_user_by_id(action, id, user)
+      user = to_entity(User, user)
+      user.owner = organization_name if user.owner.to_s.empty?
+      do_post(action, { 'id' => id }, user)['data'] == 'Affected'
+    end
+  end
+end

data/lib/casdoor/util.rb

@@ -0,0 +1,147 @@
+# frozen_string_literal: true
+
+# Copyright 2026 The Casdoor Authors. All Rights Reserved.
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require 'json'
+require 'net/http'
+require 'securerandom'
+require 'time'
+require 'uri'
+
+module Casdoor
+  # The current time in RFC 3339, the format of the "createdTime" of Casdoor
+  def self.get_current_time
+    Time.now.iso8601
+  end
+
+  # The HTTP layer, the counterpart of util.go of the Go SDK. Any Casdoor API can be called with these methods,
+  # authenticated as the client. The responses of Casdoor are hashes like
+  # {"status" => "ok", "msg" => "", "data" => ..., "data2" => ...}.
+  class Client
+    def get_url(action, query_map = nil)
+      query = (query_map || {}).compact.transform_keys(&:to_s)
+      url = "#{endpoint}/api/#{action}"
+      query.empty? ? url : "#{url}?#{URI.encode_www_form(query)}"
+    end
+
+    # "owner/name" with the client's organization as the owner, unless name is already "owner/name"
+    def get_id(name)
+      get_owner_id(name, organization_name)
+    end
+
+    # Calls a GET API, and returns the whole response
+    def do_get_response(url)
+      body = parse_body(perform(Net::HTTP::Get.new(URI(url))))
+      raise ApiError, body['msg'].to_s unless body.is_a?(Hash) && body['status'] == 'ok'
+
+      body
+    end
+
+    # Calls a GET API, and returns the "data" of the response
+    def do_get_bytes(url)
+      do_get_response(url)['data']
+    end
+
+    # Calls a GET API, and returns the raw body of the response
+    def do_get_bytes_raw(url)
+      response = perform(Net::HTTP::Get.new(URI(url)))
+      check_response(parse_body(response)) if response['Content-Type'].to_s.include?('json')
+      response.body
+    end
+
+    # Calls a POST API, and returns the whole response. The body is posted as JSON, or as form fields when is_form,
+    # or as a file named "file" when is_file.
+    def do_post(action, query_map, post_body, is_form = false, is_file = false)
+      request = Net::HTTP::Post.new(URI(get_url(action, query_map)))
+      if is_file
+        request.set_form([['file', post_body.to_s, { filename: 'file' }]], 'multipart/form-data')
+      elsif is_form
+        request.set_form((post_body || {}).to_h.transform_keys(&:to_s).transform_values(&:to_s), 'multipart/form-data')
+      else
+        request['Content-Type'] = 'application/json'
+        request.body = post_body.nil? || post_body.is_a?(String) ? post_body.to_s : post_body.to_json
+      end
+
+      body = parse_body(perform(request))
+      raise ApiError, body['msg'].to_s unless body.is_a?(Hash) && body['status'] == 'ok'
+
+      body
+    end
+
+    # Calls a POST API, and returns the raw body of the response
+    def do_post_bytes_raw(url, content_type, body)
+      request = Net::HTTP::Post.new(URI(url))
+      request['Content-Type'] = content_type.to_s.empty? ? 'text/plain;charset=UTF-8' : content_type
+      request.body = body
+      perform(request).body
+    end
+
+    private
+
+    def get_owner_id(name, default_owner)
+      name.to_s.include?('/') ? name.to_s : "#{default_owner}/#{name}"
+    end
+
+    def get_admin_id(name)
+      get_owner_id(name, 'admin')
+    end
+
+    def set_auth_header(request)
+      if access_token
+        request['Authorization'] = "Bearer #{access_token}"
+      else
+        request.basic_auth(client_id.to_s, client_secret.to_s)
+      end
+    end
+
+    def perform(request, auth: true)
+      set_auth_header(request) if auth
+      request['Accept'] ||= 'application/json'
+      custom_headers.each { |key, value| request[key] = value }
+
+      uri = request.uri
+      Net::HTTP.start(uri.host, uri.port, use_ssl: uri.scheme == 'https', open_timeout: open_timeout,
+                                          read_timeout: read_timeout) do |http|
+        http.request(request)
+      end
+    end
+
+    # Parses the JSON body. Errors of the HTTP layer are raised, while the {"status": "error"} responses are left to
+    # the caller.
+    def parse_body(response)
+      begin
+        body = JSON.parse(response.body.to_s)
+      rescue JSON::ParserError
+        raise HttpError.new(response.code.to_i, response.body)
+      end
+
+      return body if response.is_a?(Net::HTTPSuccess)
+      # Casdoor answers some errors with a non-2xx status and a JSON body that explains the error
+      return body if body.is_a?(Hash) && (body['status'] == 'error' || body['error'])
+
+      raise HttpError.new(response.code.to_i, response.body)
+    end
+
+    def send_request(request, auth: true)
+      parse_body(perform(request, auth: auth))
+    end
+
+    def check_response(body)
+      raise ApiError, body['msg'].to_s if body.is_a?(Hash) && body['status'] == 'error'
+
+      body
+    end
+  end
+end